I0428 04:59:45.797445 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0428 04:59:45.797589 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0428 04:59:45.797712 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0428 04:59:45.807282 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0428 04:59:45.807997 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0428 04:59:45.807994 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0428 04:59:45.808077 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0428 04:59:45.810958 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0428 04:59:45.829254 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0428 04:59:45.834305 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0428 04:59:45.834377 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0428 04:59:45.835143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0428 04:59:45.837445 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0428 04:59:45.837619 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0428 04:59:45.842530 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0428 04:59:45.849457 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0428 04:59:45.852419 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0428 04:59:45.855567 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0428 04:59:45.858512 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0428 04:59:45.861381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0428 04:59:45.863616 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0428 04:59:45.865577 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0428 04:59:45.872390 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0428 04:59:45.874541 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0428 04:59:45.874575 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0428 04:59:45.874665 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0428 04:59:45.878390 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0428 04:59:45.881660 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0428 04:59:45.884375 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0428 04:59:45.887098 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0428 04:59:45.889670 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0428 04:59:45.889781 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0428 04:59:45.892020 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0428 04:59:45.895985 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 04:59:45.895991 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 04:59:45.899908 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 04:59:45.900988 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 04:59:45.901254 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 04:59:45.901374 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 04:59:45.901384 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 04:59:45.902065 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 04:59:45.902470 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 04:59:46.020860 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0428 05:00:25.908851 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 05:00:25.90882567 +0000 UTC m=+40.153421675 I0428 05:00:27.004920 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 05:00:27.004900198 +0000 UTC m=+41.249496223 I0428 05:00:27.005054 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:00:27.005158 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 05:00:27.005146483 +0000 UTC m=+41.249742488 E0428 05:00:28.398702 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 05:00:28.398790 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 05:00:28.398779922 +0000 UTC m=+42.643375947 E0428 05:00:28.398827 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 05:00:28.403275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:28.403466 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:00:28.403548 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 05:00:28.403534863 +0000 UTC m=+42.648130888 E0428 05:00:28.736697 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0428 05:00:28.739312 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 05:00:28.739351 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 05:00:28.739391 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0428 05:00:28.782278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2fnqg" condition "Approved" to 2026-04-28 05:00:28.782264931 +0000 UTC m=+43.026860926 I0428 05:00:28.800307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2fnqg" condition "Ready" to 2026-04-28 05:00:28.800294413 +0000 UTC m=+43.044890408 I0428 05:00:28.827867 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:00:28.827854466 +0000 UTC m=+43.072450471 I0428 05:00:28.856775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:28.857003 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:00:28.856996041 +0000 UTC m=+43.101592036 I0428 05:00:28.882147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:28.889685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:33.737306 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:00:33.737287979 +0000 UTC m=+47.981884014 I0428 05:00:34.813584 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 05:00:34.813561979 +0000 UTC m=+49.058158014 I0428 05:00:34.814013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:00:34.814056 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 05:00:34.814047968 +0000 UTC m=+49.058643993 I0428 05:00:34.834807 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 05:00:34.834794806 +0000 UTC m=+49.079390811 I0428 05:00:34.839729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:34.839822 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:00:34.839845 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 05:00:34.839837709 +0000 UTC m=+49.084433704 I0428 05:00:35.054856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:35.069511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-d4c8b" condition "Approved" to 2026-04-28 05:00:35.069494348 +0000 UTC m=+49.314090353 I0428 05:00:35.113852 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-d4c8b" condition "Ready" to 2026-04-28 05:00:35.113836621 +0000 UTC m=+49.358432626 I0428 05:00:35.152838 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:00:35.152823734 +0000 UTC m=+49.397419759 I0428 05:00:35.175654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:35.176050 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:00:35.176041873 +0000 UTC m=+49.420637878 I0428 05:00:35.198592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:35.198933 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:00:35.198924593 +0000 UTC m=+49.443520598 I0428 05:00:39.471829 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 05:00:39.471803426 +0000 UTC m=+53.716399451 I0428 05:00:39.472038 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:00:39.472102 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-28 05:00:39.472089122 +0000 UTC m=+53.716685147 I0428 05:00:39.497420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:39.497522 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 05:00:39.497512545 +0000 UTC m=+53.742108540 I0428 05:00:39.516638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:39.517225 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 05:00:39.517215711 +0000 UTC m=+53.761811706 I0428 05:00:39.525061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-xrw8q" condition "Approved" to 2026-04-28 05:00:39.525041022 +0000 UTC m=+53.769637057 I0428 05:00:39.528741 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 05:00:39.528728387 +0000 UTC m=+53.773324382 I0428 05:00:39.535290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:39.550297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-xrw8q" condition "Ready" to 2026-04-28 05:00:39.550281912 +0000 UTC m=+53.794877907 I0428 05:00:39.586496 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:00:39.586480438 +0000 UTC m=+53.831076443 I0428 05:00:39.601853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:39.602063 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:00:39.602058098 +0000 UTC m=+53.846654103 I0428 05:00:39.618714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:40.321831 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:00:40.321869 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-28 05:00:40.321859779 +0000 UTC m=+54.566455784 I0428 05:00:40.322349 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-28 05:00:40.322343779 +0000 UTC m=+54.566939784 I0428 05:00:40.343596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:40.343717 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-28 05:00:40.343705749 +0000 UTC m=+54.588301764 I0428 05:00:40.366041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:40.399810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-wgprp" condition "Approved" to 2026-04-28 05:00:40.399796983 +0000 UTC m=+54.644392988 I0428 05:00:40.418320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-wgprp" condition "Ready" to 2026-04-28 05:00:40.418304045 +0000 UTC m=+54.662900070 I0428 05:00:40.448745 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:00:40.448724041 +0000 UTC m=+54.693320076 I0428 05:00:40.474376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:40.474595 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:00:40.474586264 +0000 UTC m=+54.719182259 I0428 05:00:40.495575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:40.496125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:00:40.496341 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:00:40.496329401 +0000 UTC m=+54.740925406 I0428 05:00:41.092919 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-28 05:00:41.092904625 +0000 UTC m=+55.337500630 I0428 05:00:41.888830 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-28 05:00:41.888802574 +0000 UTC m=+56.133398599 I0428 05:05:17.996407 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-28 05:05:17.996382416 +0000 UTC m=+332.240978421 I0428 05:05:17.997014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:05:17.997035 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-28 05:05:17.997030688 +0000 UTC m=+332.241626693 I0428 05:05:19.500120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:05:19.500234 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:05:19.500267 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-28 05:05:19.500260198 +0000 UTC m=+333.744856203 E0428 05:05:21.304754 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 05:05:21.304826 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-28 05:05:21.304817398 +0000 UTC m=+335.549413403 I0428 05:05:21.304877 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 05:05:21.432704 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:05:21.432756 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-28 05:05:21.432745353 +0000 UTC m=+335.677341378 E0428 05:05:21.437335 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0428 05:05:21.440211 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 05:05:21.440261 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0428 05:05:21.440316 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0428 05:05:21.491822 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:05:21.491933 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-28 05:05:21.491920464 +0000 UTC m=+335.736516479 I0428 05:05:21.492129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:05:21.492292 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-28 05:05:21.492283402 +0000 UTC m=+335.736879417 I0428 05:05:21.780285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:05:21.780364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:05:21.780381 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-28 05:05:21.780374687 +0000 UTC m=+336.024970682 I0428 05:05:21.948573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:05:21.948612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-nzn8p" condition "Approved" to 2026-04-28 05:05:21.948593722 +0000 UTC m=+336.193189707 I0428 05:05:22.071050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-nzn8p" condition "Ready" to 2026-04-28 05:05:22.071036742 +0000 UTC m=+336.315632737 I0428 05:05:22.155265 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:05:22.155247902 +0000 UTC m=+336.399843907 I0428 05:05:22.185915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:05:22.186325 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:05:22.186316265 +0000 UTC m=+336.430912300 I0428 05:05:22.217707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:05:22.218049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:05:23.257187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-95vdk" condition "Approved" to 2026-04-28 05:05:23.257169982 +0000 UTC m=+337.501765987 I0428 05:05:26.106977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-95vdk" condition "Ready" to 2026-04-28 05:05:26.106957588 +0000 UTC m=+340.351553583 I0428 05:05:26.441272 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:05:26.441259767 +0000 UTC m=+340.685855772 I0428 05:05:28.865937 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-95vdk" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:05:28.865885338 +0000 UTC m=+343.110481343 E0428 05:05:43.761754 1 controller.go:167] "re-queuing item due to error processing" err="failed to apply secret openstack/valkey-server-certs: Patch \"https://10.96.0.1:443/api/v1/namespaces/openstack/secrets/valkey-server-certs?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" I0428 05:05:45.694919 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:05:45.694867199 +0000 UTC m=+359.939463234 E0428 05:05:54.763533 1 controller.go:167] "re-queuing item due to error processing" err="Put \"https://10.96.0.1:443/apis/cert-manager.io/v1/namespaces/openstack/certificates/valkey-server/status\": context deadline exceeded" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" I0428 05:11:19.322811 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready" to 2026-04-28 05:11:19.321739305 +0000 UTC m=+693.566335310 I0428 05:11:19.324305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-65.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:11:19.324336 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Issuing" to 2026-04-28 05:11:19.324331093 +0000 UTC m=+693.568927108 I0428 05:11:19.344257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:11:19.344329 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready" to 2026-04-28 05:11:19.344319437 +0000 UTC m=+693.588915442 I0428 05:11:19.450700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:11:19.478317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-65.nip.io-tls-wmb9w" condition "Approved" to 2026-04-28 05:11:19.478291492 +0000 UTC m=+693.722887517 I0428 05:11:19.501769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-65.nip.io-tls-wmb9w" condition "Ready" to 2026-04-28 05:11:19.501748862 +0000 UTC m=+693.746344897 I0428 05:11:19.546436 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:11:19.546422478 +0000 UTC m=+693.791018473 I0428 05:11:19.568573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:11:19.569236 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:11:19.569030721 +0000 UTC m=+693.813626726 I0428 05:11:19.589341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:13:33.703963 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 05:13:33.703943387 +0000 UTC m=+827.948539412 I0428 05:13:33.704325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:13:33.704419 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 05:13:33.704409376 +0000 UTC m=+827.949005411 I0428 05:13:33.722128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:13:33.722200 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:13:33.722218 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 05:13:33.722211707 +0000 UTC m=+827.966807702 I0428 05:13:34.155119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w577l" condition "Approved" to 2026-04-28 05:13:34.155108589 +0000 UTC m=+828.399704594 I0428 05:13:34.170062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-w577l" condition "Ready" to 2026-04-28 05:13:34.170055066 +0000 UTC m=+828.414651071 I0428 05:13:34.194716 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:13:34.194698088 +0000 UTC m=+828.439294123 I0428 05:13:34.214279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:14:15.245182 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 05:14:15.245166891 +0000 UTC m=+869.489762896 I0428 05:14:15.245547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:14:15.245622 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 05:14:15.245612691 +0000 UTC m=+869.490208696 I0428 05:14:15.261708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:14:15.261854 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:14:15.261920 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 05:14:15.261913812 +0000 UTC m=+869.506509807 I0428 05:14:15.508536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:14:15.515621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-slh59" condition "Approved" to 2026-04-28 05:14:15.515594897 +0000 UTC m=+869.760190922 I0428 05:14:15.540217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-slh59" condition "Ready" to 2026-04-28 05:14:15.54020635 +0000 UTC m=+869.784802345 I0428 05:14:15.561856 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:14:15.561845024 +0000 UTC m=+869.806441019 I0428 05:14:15.587288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:14:15.587637 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:14:15.587628859 +0000 UTC m=+869.832224864 I0428 05:14:15.621450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:14:43.406383 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-28 05:14:43.406369374 +0000 UTC m=+897.650965409 I0428 05:14:43.406971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:14:43.407000 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-28 05:14:43.406994206 +0000 UTC m=+897.651590241 I0428 05:14:43.421830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:14:43.421887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:14:43.421901 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-28 05:14:43.42189569 +0000 UTC m=+897.666491695 I0428 05:14:43.641724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:14:43.648098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-h7p8x" condition "Approved" to 2026-04-28 05:14:43.648084391 +0000 UTC m=+897.892680386 I0428 05:14:43.666780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-h7p8x" condition "Ready" to 2026-04-28 05:14:43.666765606 +0000 UTC m=+897.911361631 I0428 05:14:43.697925 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:14:43.697908249 +0000 UTC m=+897.942504274 I0428 05:14:43.717131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:14:47.142190 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 05:14:47.142177686 +0000 UTC m=+901.386773681 I0428 05:14:47.142582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:14:47.142593 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 05:14:47.142590614 +0000 UTC m=+901.387186609 I0428 05:14:47.156493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:14:47.156558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:14:47.156576 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 05:14:47.15657113 +0000 UTC m=+901.401167135 E0428 05:14:47.160330 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0428 05:14:47.160497 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 05:14:47.160490675 +0000 UTC m=+901.405086680 E0428 05:14:47.160518 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 05:14:47.171599 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0428 05:14:47.172127 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 05:14:47.172207 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0428 05:14:47.172276 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0428 05:14:47.195244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wlsxv" condition "Approved" to 2026-04-28 05:14:47.195230576 +0000 UTC m=+901.439826581 I0428 05:14:47.208325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wlsxv" condition "Ready" to 2026-04-28 05:14:47.208308824 +0000 UTC m=+901.452904859 I0428 05:14:47.234414 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:14:47.23440122 +0000 UTC m=+901.478997215 I0428 05:14:47.251460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:14:47.251762 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:14:47.25175445 +0000 UTC m=+901.496350445 I0428 05:14:47.254959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:14:47.271331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:14:47.271605 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:14:47.271597667 +0000 UTC m=+901.516193662 I0428 05:14:52.172371 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:14:52.172355416 +0000 UTC m=+906.416951451 I0428 05:15:27.012821 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-28 05:15:27.012791053 +0000 UTC m=+941.257387048 I0428 05:15:27.014072 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:15:27.014091 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-28 05:15:27.014087758 +0000 UTC m=+941.258683753 I0428 05:15:27.030221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:27.030649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:15:27.030673 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-28 05:15:27.030666973 +0000 UTC m=+941.275262968 I0428 05:15:27.284051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:27.301856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-pgszd" condition "Approved" to 2026-04-28 05:15:27.30184304 +0000 UTC m=+941.546439045 I0428 05:15:27.327562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-pgszd" condition "Ready" to 2026-04-28 05:15:27.32754883 +0000 UTC m=+941.572144835 I0428 05:15:27.356124 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:27.356110413 +0000 UTC m=+941.600706418 I0428 05:15:27.381321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:27.381654 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:27.381644918 +0000 UTC m=+941.626240923 I0428 05:15:27.394685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:27.395067 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:27.395058954 +0000 UTC m=+941.639654959 I0428 05:15:35.476449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:15:35.476491 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 05:15:35.476483476 +0000 UTC m=+949.721079471 I0428 05:15:35.477703 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 05:15:35.477622518 +0000 UTC m=+949.722218523 I0428 05:15:35.488956 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 05:15:35.488943743 +0000 UTC m=+949.733539738 I0428 05:15:35.489382 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:15:35.489449 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 05:15:35.489444952 +0000 UTC m=+949.734040957 I0428 05:15:35.523970 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 05:15:35.523960759 +0000 UTC m=+949.768556774 I0428 05:15:35.524208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:15:35.524255 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 05:15:35.524239424 +0000 UTC m=+949.768835419 I0428 05:15:35.538634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:35.538704 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:15:35.538726 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 05:15:35.538719299 +0000 UTC m=+949.783315294 I0428 05:15:35.539064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:35.539105 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 05:15:35.539102197 +0000 UTC m=+949.783698192 I0428 05:15:35.556354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:35.557341 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 05:15:35.557326684 +0000 UTC m=+949.801922689 I0428 05:15:35.639787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:35.673461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gjjnc" condition "Approved" to 2026-04-28 05:15:35.673447592 +0000 UTC m=+949.918043617 I0428 05:15:35.694934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gjjnc" condition "Ready" to 2026-04-28 05:15:35.69492263 +0000 UTC m=+949.939518635 I0428 05:15:35.725581 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:35.725568563 +0000 UTC m=+949.970164568 I0428 05:15:35.746340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:35.747501 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:35.74749106 +0000 UTC m=+949.992087065 I0428 05:15:35.764379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:35.768057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:35.768457 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:35.768449208 +0000 UTC m=+950.013045203 I0428 05:15:35.784882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:35.795418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nsndc" condition "Approved" to 2026-04-28 05:15:35.795407722 +0000 UTC m=+950.040003717 I0428 05:15:35.796795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-46drg" condition "Approved" to 2026-04-28 05:15:35.796785068 +0000 UTC m=+950.041381103 I0428 05:15:35.929962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nsndc" condition "Ready" to 2026-04-28 05:15:35.929950411 +0000 UTC m=+950.174546426 I0428 05:15:35.986381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-46drg" condition "Ready" to 2026-04-28 05:15:35.986371173 +0000 UTC m=+950.230967178 I0428 05:15:36.271866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:15:36.271899 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls" condition "Issuing" to 2026-04-28 05:15:36.271892204 +0000 UTC m=+950.516488199 I0428 05:15:36.272145 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls" condition "Ready" to 2026-04-28 05:15:36.272141809 +0000 UTC m=+950.516737794 I0428 05:15:36.566752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:36.566806 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls" condition "Ready" to 2026-04-28 05:15:36.566799763 +0000 UTC m=+950.811395758 I0428 05:15:36.685857 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:36.685846097 +0000 UTC m=+950.930442102 I0428 05:15:36.728025 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:36.728012379 +0000 UTC m=+950.972608374 I0428 05:15:37.028004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:37.098907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:37.099286 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:37.09928002 +0000 UTC m=+951.343876015 I0428 05:15:37.374765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:37.525675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:37.790547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4bbjc-zls8s" condition "Approved" to 2026-04-28 05:15:37.790538178 +0000 UTC m=+952.035134163 I0428 05:15:37.951990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4bbjc-zls8s" condition "Ready" to 2026-04-28 05:15:37.951978728 +0000 UTC m=+952.196574733 I0428 05:15:38.371741 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:38.371729731 +0000 UTC m=+952.616325726 I0428 05:15:38.480432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:38.480690 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:38.480675594 +0000 UTC m=+952.725271589 I0428 05:15:38.725684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:38.773622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4bbjc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:45.873274 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:15:45.873304 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 05:15:45.873297344 +0000 UTC m=+960.117893339 I0428 05:15:45.873634 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 05:15:45.873630771 +0000 UTC m=+960.118226766 I0428 05:15:45.910160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:45.910232 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 05:15:45.910226337 +0000 UTC m=+960.154822332 I0428 05:15:46.080242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:15:46.116772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kcpxs" condition "Approved" to 2026-04-28 05:15:46.116757105 +0000 UTC m=+960.361353120 I0428 05:15:46.148447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kcpxs" condition "Ready" to 2026-04-28 05:15:46.148424958 +0000 UTC m=+960.393020963 I0428 05:15:46.181854 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:46.181840073 +0000 UTC m=+960.426436088 I0428 05:15:46.201808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:16:20.569869 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-28 05:16:20.569852915 +0000 UTC m=+994.814448920 I0428 05:16:20.570050 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:16:20.570108 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-28 05:16:20.57010002 +0000 UTC m=+994.814696025 I0428 05:16:20.586774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:16:20.586839 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:16:20.586854 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-28 05:16:20.586847798 +0000 UTC m=+994.831443803 I0428 05:16:20.793507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qzr5j" condition "Approved" to 2026-04-28 05:16:20.793497529 +0000 UTC m=+995.038093524 I0428 05:16:20.819597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qzr5j" condition "Ready" to 2026-04-28 05:16:20.819549195 +0000 UTC m=+995.064145200 I0428 05:16:20.853044 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:20.852990051 +0000 UTC m=+995.097586066 I0428 05:16:20.873173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:16:20.873595 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:20.873585292 +0000 UTC m=+995.118181317 I0428 05:16:20.901995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:16:20.904614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:16:41.865121 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:16:41.865245 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-28 05:16:41.865232256 +0000 UTC m=+1016.109828331 I0428 05:16:41.865920 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-28 05:16:41.865909129 +0000 UTC m=+1016.110505154 I0428 05:16:41.880272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:16:41.880369 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-28 05:16:41.880355204 +0000 UTC m=+1016.124951199 I0428 05:16:42.052888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:16:42.082172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rwq96" condition "Approved" to 2026-04-28 05:16:42.082160612 +0000 UTC m=+1016.326756607 I0428 05:16:42.101748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rwq96" condition "Ready" to 2026-04-28 05:16:42.101738405 +0000 UTC m=+1016.346334400 I0428 05:16:42.131909 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:42.131896478 +0000 UTC m=+1016.376492463 I0428 05:16:42.150641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:30.226587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:17:30.226622 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-28 05:17:30.226615633 +0000 UTC m=+1064.471211628 I0428 05:17:30.229993 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-28 05:17:30.229979638 +0000 UTC m=+1064.474575633 I0428 05:17:30.264401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:30.264517 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-28 05:17:30.264512645 +0000 UTC m=+1064.509108640 I0428 05:17:31.438087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:31.483993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-7ddgj" condition "Approved" to 2026-04-28 05:17:31.483980941 +0000 UTC m=+1065.728576936 I0428 05:17:31.522471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-7ddgj" condition "Ready" to 2026-04-28 05:17:31.522461143 +0000 UTC m=+1065.767057138 I0428 05:17:31.558815 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:31.558801114 +0000 UTC m=+1065.803397109 I0428 05:17:31.585561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:31.586265 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:31.586256466 +0000 UTC m=+1065.830852471 I0428 05:17:31.606370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:37.392381 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-28 05:17:37.392365492 +0000 UTC m=+1071.636961487 I0428 05:17:37.410209 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:17:37.410239 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-28 05:17:37.410232342 +0000 UTC m=+1071.654828337 I0428 05:17:37.411117 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-28 05:17:37.411111709 +0000 UTC m=+1071.655707704 I0428 05:17:37.422895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:37.422961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:17:37.422985 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-28 05:17:37.422978684 +0000 UTC m=+1071.667574689 E0428 05:17:37.448108 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0428 05:17:37.501958 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-28 05:17:37.501942497 +0000 UTC m=+1071.746538512 I0428 05:17:37.532672 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-28 05:17:37.5326266 +0000 UTC m=+1071.777222595 I0428 05:17:37.532927 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:17:37.532941 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-28 05:17:37.532939266 +0000 UTC m=+1071.777535261 I0428 05:17:37.549707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:37.549804 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-28 05:17:37.549790186 +0000 UTC m=+1071.794386191 E0428 05:17:37.708962 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0428 05:17:37.721587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:37.766943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-26g4r" condition "Approved" to 2026-04-28 05:17:37.766926665 +0000 UTC m=+1072.011522660 I0428 05:17:37.790793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-26g4r" condition "Ready" to 2026-04-28 05:17:37.790783148 +0000 UTC m=+1072.035379143 I0428 05:17:37.823249 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:37.823236515 +0000 UTC m=+1072.067832520 I0428 05:17:37.844452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:38.425746 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-28 05:17:38.425732841 +0000 UTC m=+1072.670328826 I0428 05:17:38.456983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:17:38.456976 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-28 05:17:38.456956385 +0000 UTC m=+1072.701552420 I0428 05:17:38.457028 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-28 05:17:38.457018236 +0000 UTC m=+1072.701614261 I0428 05:17:38.471758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:38.471848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:17:38.471869 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-28 05:17:38.471861908 +0000 UTC m=+1072.716457913 I0428 05:17:38.625309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-g995p" condition "Approved" to 2026-04-28 05:17:38.625297216 +0000 UTC m=+1072.869893211 I0428 05:17:38.663318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-g995p" condition "Ready" to 2026-04-28 05:17:38.663303648 +0000 UTC m=+1072.907899643 I0428 05:17:38.714396 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:38.71437932 +0000 UTC m=+1072.958975325 I0428 05:17:38.745788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:38.746031 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:38.746024761 +0000 UTC m=+1072.990620756 I0428 05:17:38.766875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:38.767070 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:38.767063181 +0000 UTC m=+1073.011659176 I0428 05:17:38.916612 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-28 05:17:38.916581144 +0000 UTC m=+1073.161177179 I0428 05:17:38.952078 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:17:38.952110 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-28 05:17:38.952103649 +0000 UTC m=+1073.196699634 I0428 05:17:38.952202 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-28 05:17:38.952189221 +0000 UTC m=+1073.196785206 I0428 05:17:38.969304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:38.969371 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:17:38.969387 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-28 05:17:38.969382338 +0000 UTC m=+1073.213978333 I0428 05:17:39.178621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-z6m52" condition "Approved" to 2026-04-28 05:17:39.178610146 +0000 UTC m=+1073.423206131 I0428 05:17:39.209349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-z6m52" condition "Ready" to 2026-04-28 05:17:39.20933812 +0000 UTC m=+1073.453934115 I0428 05:17:39.258687 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:39.258674058 +0000 UTC m=+1073.503270053 I0428 05:17:39.276838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:39.277260 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:39.277250482 +0000 UTC m=+1073.521846487 I0428 05:17:39.294471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:39.392861 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-04-28 05:17:39.392845029 +0000 UTC m=+1073.637441034 I0428 05:17:39.424664 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-04-28 05:17:39.424654814 +0000 UTC m=+1073.669250809 I0428 05:17:39.424894 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:17:39.424906 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-28 05:17:39.424903149 +0000 UTC m=+1073.669499144 I0428 05:17:39.448143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:39.448252 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:17:39.448269 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-04-28 05:17:39.448263603 +0000 UTC m=+1073.692859598 I0428 05:17:39.950708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-9xrvk" condition "Approved" to 2026-04-28 05:17:39.950697187 +0000 UTC m=+1074.195293182 I0428 05:17:39.994037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-9xrvk" condition "Ready" to 2026-04-28 05:17:39.994025381 +0000 UTC m=+1074.238621386 I0428 05:17:40.314309 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:40.31429673 +0000 UTC m=+1074.558892725 I0428 05:17:40.465314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:40.756439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:56.180756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:17:56.181430 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-04-28 05:17:56.181417176 +0000 UTC m=+1090.426013211 I0428 05:17:56.180784 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-28 05:17:56.180755373 +0000 UTC m=+1090.425351378 I0428 05:17:56.202114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:56.202333 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-04-28 05:17:56.202316703 +0000 UTC m=+1090.446912748 I0428 05:17:56.388736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:56.424679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-tt6lw" condition "Approved" to 2026-04-28 05:17:56.424670671 +0000 UTC m=+1090.669266666 I0428 05:17:56.443109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-tt6lw" condition "Ready" to 2026-04-28 05:17:56.443101122 +0000 UTC m=+1090.687697117 I0428 05:17:56.471384 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:56.471366089 +0000 UTC m=+1090.715962114 I0428 05:17:56.487271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:57.535262 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-04-28 05:17:57.535248918 +0000 UTC m=+1091.779844913 I0428 05:17:57.535320 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:17:57.535359 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-28 05:17:57.53535041 +0000 UTC m=+1091.779946415 I0428 05:17:57.553877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:57.553978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:17:57.554000 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-04-28 05:17:57.553995024 +0000 UTC m=+1091.798591019 I0428 05:17:57.776230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-5x5mn" condition "Approved" to 2026-04-28 05:17:57.776205309 +0000 UTC m=+1092.020801314 I0428 05:17:57.794679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-5x5mn" condition "Ready" to 2026-04-28 05:17:57.79466558 +0000 UTC m=+1092.039261595 I0428 05:17:57.825247 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:57.825233161 +0000 UTC m=+1092.069829156 I0428 05:17:57.852611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:57.852960 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:57.852952488 +0000 UTC m=+1092.097548493 I0428 05:17:57.867195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:17:57.867704 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:57.867699268 +0000 UTC m=+1092.112295273 I0428 05:19:12.545300 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-04-28 05:19:12.545280992 +0000 UTC m=+1166.789877027 I0428 05:19:12.545707 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:19:12.545745 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-28 05:19:12.545738422 +0000 UTC m=+1166.790334417 I0428 05:19:12.567170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:19:12.567291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:19:12.567321 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-04-28 05:19:12.567312092 +0000 UTC m=+1166.811908117 I0428 05:19:12.764832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:19:12.775924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-mfswf" condition "Approved" to 2026-04-28 05:19:12.775905978 +0000 UTC m=+1167.020501993 I0428 05:19:12.799363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-mfswf" condition "Ready" to 2026-04-28 05:19:12.799352494 +0000 UTC m=+1167.043948499 I0428 05:19:12.855200 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:19:12.855184166 +0000 UTC m=+1167.099780171 I0428 05:19:12.881267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:19:12.954290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:20:05.662904 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:20:05.662936 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-28 05:20:05.662929966 +0000 UTC m=+1219.907525971 I0428 05:20:05.663210 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-04-28 05:20:05.663204911 +0000 UTC m=+1219.907800916 I0428 05:20:05.694974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:20:05.695081 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:20:05.695098 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-04-28 05:20:05.695092948 +0000 UTC m=+1219.939688943 I0428 05:20:06.000119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:20:06.008246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-rrhvm" condition "Approved" to 2026-04-28 05:20:06.008226791 +0000 UTC m=+1220.252822826 I0428 05:20:06.030046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-rrhvm" condition "Ready" to 2026-04-28 05:20:06.030031596 +0000 UTC m=+1220.274627631 I0428 05:20:06.057895 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:20:06.057866696 +0000 UTC m=+1220.302462701 I0428 05:20:06.078388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:20:07.084329 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:20:07.084379 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-28 05:20:07.084361414 +0000 UTC m=+1221.328957409 I0428 05:20:07.084733 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-04-28 05:20:07.08469107 +0000 UTC m=+1221.329287085 I0428 05:20:07.109969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:20:07.110013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:20:07.110026 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-04-28 05:20:07.110021692 +0000 UTC m=+1221.354617687 I0428 05:20:07.660013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-62l5f" condition "Approved" to 2026-04-28 05:20:07.660002199 +0000 UTC m=+1221.904598194 I0428 05:20:07.676673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-62l5f" condition "Ready" to 2026-04-28 05:20:07.676661986 +0000 UTC m=+1221.921257991 I0428 05:20:07.708960 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:20:07.70895141 +0000 UTC m=+1221.953547405 I0428 05:20:07.734386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:20:07.734727 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:20:07.734720751 +0000 UTC m=+1221.979316746 I0428 05:20:07.747592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:20:07.756352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:20:07.756385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:20:07.756600 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:20:07.756594366 +0000 UTC m=+1222.001190361 I0428 05:20:57.410467 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-28 05:20:57.410452676 +0000 UTC m=+1271.655048681 I0428 05:20:57.411966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:20:57.411985 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-04-28 05:20:57.411982115 +0000 UTC m=+1271.656578110 I0428 05:20:57.426872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:20:57.426943 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-04-28 05:20:57.42693709 +0000 UTC m=+1271.671533075 I0428 05:20:57.556098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:20:57.589698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-mkpf7" condition "Approved" to 2026-04-28 05:20:57.589683774 +0000 UTC m=+1271.834279779 I0428 05:20:57.611522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-mkpf7" condition "Ready" to 2026-04-28 05:20:57.611510709 +0000 UTC m=+1271.856106714 I0428 05:20:57.640076 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:20:57.640063122 +0000 UTC m=+1271.884659127 I0428 05:20:57.663333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:20:59.701045 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-04-28 05:20:59.700959939 +0000 UTC m=+1273.945555974 I0428 05:20:59.702013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:20:59.702150 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-28 05:20:59.702141122 +0000 UTC m=+1273.946737157 I0428 05:20:59.715769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:20:59.715961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:20:59.716034 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-04-28 05:20:59.716027645 +0000 UTC m=+1273.960623650 I0428 05:20:59.902670 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-7h86t" condition "Approved" to 2026-04-28 05:20:59.902654124 +0000 UTC m=+1274.147250129 I0428 05:20:59.934013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-7h86t" condition "Ready" to 2026-04-28 05:20:59.93398565 +0000 UTC m=+1274.178581695 I0428 05:20:59.971900 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:20:59.971886971 +0000 UTC m=+1274.216482976 I0428 05:20:59.992282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:23:29.597047 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-28 05:23:29.59703209 +0000 UTC m=+1423.841628085 I0428 05:23:29.597439 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:23:29.597473 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-04-28 05:23:29.597468138 +0000 UTC m=+1423.842064133 I0428 05:23:29.618313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:23:29.618417 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-04-28 05:23:29.618407856 +0000 UTC m=+1423.863003891 I0428 05:23:29.817915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:23:29.884300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-fgmjm" condition "Approved" to 2026-04-28 05:23:29.884283137 +0000 UTC m=+1424.128879132 I0428 05:23:29.922445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-fgmjm" condition "Ready" to 2026-04-28 05:23:29.922435293 +0000 UTC m=+1424.167031288 I0428 05:23:29.950663 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:23:29.950648129 +0000 UTC m=+1424.195244124 I0428 05:23:29.969502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:23:29.969994 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:23:29.969984436 +0000 UTC m=+1424.214580451 I0428 05:23:29.979546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:23:29.995577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:23:30.734385 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7rp65-vnc" condition "Ready" to 2026-04-28 05:23:30.734375458 +0000 UTC m=+1424.978971453 I0428 05:23:30.734987 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7rp65-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:23:30.735046 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7rp65-vnc" condition "Issuing" to 2026-04-28 05:23:30.735032751 +0000 UTC m=+1424.979628756 I0428 05:23:30.735354 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7rp65-api" condition "Ready" to 2026-04-28 05:23:30.735347997 +0000 UTC m=+1424.979944002 I0428 05:23:30.735544 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7rp65-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:23:30.735565 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7rp65-api" condition "Issuing" to 2026-04-28 05:23:30.735561021 +0000 UTC m=+1424.980157026 I0428 05:23:30.753371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-7rp65-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7rp65-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:23:30.753525 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7rp65-vnc" condition "Ready" to 2026-04-28 05:23:30.753511372 +0000 UTC m=+1424.998107377 I0428 05:23:30.754841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7rp65-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7rp65-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:23:30.754891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-7rp65-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:23:30.754905 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7rp65-api" condition "Issuing" to 2026-04-28 05:23:30.754901688 +0000 UTC m=+1424.999497683 I0428 05:23:30.825873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7rp65-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7rp65-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:23:30.865543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7rp65-vnc-z9ndw" condition "Approved" to 2026-04-28 05:23:30.86552829 +0000 UTC m=+1425.110124295 I0428 05:23:30.880493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7rp65-vnc-z9ndw" condition "Ready" to 2026-04-28 05:23:30.880482604 +0000 UTC m=+1425.125078599 I0428 05:23:30.913142 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7rp65-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:23:30.913128684 +0000 UTC m=+1425.157724679 I0428 05:23:30.944689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-7rp65-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7rp65-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:23:30.967145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7rp65-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7rp65-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:23:30.984010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7rp65-api-p65cs" condition "Approved" to 2026-04-28 05:23:30.983995741 +0000 UTC m=+1425.228591746 I0428 05:23:31.003362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7rp65-api-p65cs" condition "Ready" to 2026-04-28 05:23:31.003348889 +0000 UTC m=+1425.247944894 I0428 05:23:31.027774 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7rp65-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:23:31.027763432 +0000 UTC m=+1425.272359427 I0428 05:23:31.080690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-7rp65-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7rp65-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:23:31.081095 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7rp65-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:23:31.081085625 +0000 UTC m=+1425.325681630 I0428 05:23:31.283501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-7rp65-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7rp65-api\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:24:07.621062 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-04-28 05:24:07.621049376 +0000 UTC m=+1461.865645371 I0428 05:24:07.621443 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:24:07.621462 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-28 05:24:07.621458943 +0000 UTC m=+1461.866054928 E0428 05:24:07.632014 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 05:24:07.632047 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-04-28 05:24:07.632040584 +0000 UTC m=+1461.876636569 I0428 05:24:07.632083 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 05:24:07.640207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:24:07.640322 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:24:07.640342 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-04-28 05:24:07.640335931 +0000 UTC m=+1461.884931926 E0428 05:24:07.646203 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0428 05:24:07.646548 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 05:24:07.646592 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0428 05:24:07.646665 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0428 05:24:07.678705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:24:07.684725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-vh8dt" condition "Approved" to 2026-04-28 05:24:07.684717765 +0000 UTC m=+1461.929313770 I0428 05:24:07.706838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-vh8dt" condition "Ready" to 2026-04-28 05:24:07.706828085 +0000 UTC m=+1461.951424110 I0428 05:24:07.734119 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:24:07.734104943 +0000 UTC m=+1461.978700938 I0428 05:24:07.763379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:24:07.763619 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:24:07.763609673 +0000 UTC m=+1462.008205688 I0428 05:24:07.776868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:24:07.777929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:24:07.778169 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:24:07.77816264 +0000 UTC m=+1462.022758625 I0428 05:24:08.338767 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-04-28 05:24:08.33874669 +0000 UTC m=+1462.583342725 I0428 05:24:08.338862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:24:08.338889 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-28 05:24:08.338880343 +0000 UTC m=+1462.583476378 E0428 05:24:08.350179 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 05:24:08.350305 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-04-28 05:24:08.350294409 +0000 UTC m=+1462.594890434 I0428 05:24:08.350366 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 05:24:08.352800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:24:08.352905 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:24:08.352971 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-04-28 05:24:08.35296606 +0000 UTC m=+1462.597562065 E0428 05:24:08.361607 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0428 05:24:08.361898 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0428 05:24:08.361995 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0428 05:24:08.362062 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0428 05:24:08.413429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-q4tx8" condition "Approved" to 2026-04-28 05:24:08.41342043 +0000 UTC m=+1462.658016425 I0428 05:24:08.435360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-q4tx8" condition "Ready" to 2026-04-28 05:24:08.435350906 +0000 UTC m=+1462.679946911 I0428 05:24:08.464518 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:24:08.4645077 +0000 UTC m=+1462.709103695 I0428 05:24:08.482590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:24:08.482966 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:24:08.48295899 +0000 UTC m=+1462.727554995 I0428 05:24:08.512549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:24:09.118491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:24:09.118526 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-04-28 05:24:09.118514105 +0000 UTC m=+1463.363110090 I0428 05:24:09.118782 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-28 05:24:09.11876701 +0000 UTC m=+1463.363363005 I0428 05:24:09.131828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:24:09.131909 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-04-28 05:24:09.13190349 +0000 UTC m=+1463.376499485 I0428 05:24:09.148186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:24:09.170684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-hptqb" condition "Approved" to 2026-04-28 05:24:09.170667966 +0000 UTC m=+1463.415264001 I0428 05:24:09.186899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-hptqb" condition "Ready" to 2026-04-28 05:24:09.186890034 +0000 UTC m=+1463.431486029 I0428 05:24:12.647213 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:24:12.647199425 +0000 UTC m=+1466.891795450 I0428 05:24:12.662454 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-hptqb" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:24:12.662439675 +0000 UTC m=+1466.907035680 I0428 05:24:12.688730 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:24:12.688693684 +0000 UTC m=+1466.933289719 I0428 05:24:12.707475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:24:13.362596 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:24:13.362572336 +0000 UTC m=+1467.607168361 I0428 05:27:46.833950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:27:46.834937 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-04-28 05:27:46.834926112 +0000 UTC m=+1681.079522137 I0428 05:27:46.834296 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-28 05:27:46.83427929 +0000 UTC m=+1681.078875295 I0428 05:27:46.850200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:27:46.850301 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-04-28 05:27:46.850293183 +0000 UTC m=+1681.094889188 I0428 05:27:47.291178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:27:47.334605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-fbppg" condition "Approved" to 2026-04-28 05:27:47.334595617 +0000 UTC m=+1681.579191612 I0428 05:27:47.355333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-fbppg" condition "Ready" to 2026-04-28 05:27:47.355321741 +0000 UTC m=+1681.599917746 I0428 05:27:47.393311 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:27:47.393292052 +0000 UTC m=+1681.637888087 I0428 05:27:47.415788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:27:47.416237 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:27:47.416230878 +0000 UTC m=+1681.660826873 I0428 05:27:47.442768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:28:44.893119 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-04-28 05:28:44.89310586 +0000 UTC m=+1739.137701855 I0428 05:28:44.893197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:28:44.893294 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-28 05:28:44.893283784 +0000 UTC m=+1739.137879809 I0428 05:28:44.908446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0428 05:28:44.908574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0428 05:28:44.908606 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-04-28 05:28:44.908597864 +0000 UTC m=+1739.153193859 I0428 05:28:45.023886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-72gmz" condition "Approved" to 2026-04-28 05:28:45.023874106 +0000 UTC m=+1739.268470101 I0428 05:28:45.045177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-72gmz" condition "Ready" to 2026-04-28 05:28:45.04516416 +0000 UTC m=+1739.289760165 I0428 05:28:45.071240 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:28:45.071225905 +0000 UTC m=+1739.315821910 I0428 05:28:45.094324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"